anchore/grype-vscode

Stars
15
Rank 1,371,379 (Top 28 %)
Language
TypeScript
License
Apache License 2.0
Created over 4 years ago
Updated over 1 year ago

anchore/grype-vscode

anchore

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Grype vulnerability check plugin for Visual Studio Code

grype

A vulnerability scanner for container images and filesystems

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

anchore-engine

A service that analyzes docker images and scans for vulnerabilities

anchore

This project is deprecated. Work is now done on https://github.com/anchore/syft and https://github.com/anchore/grype for local-host Software Bill of Materials and vulnerability scanning tools.

quill

Simple mac binary signing from any platform

scan-action

Anchore container analysis and scan provided as a GitHub Action

sbom-action

GitHub Action for creating software bill of materials using Syft.

anchore-cli

Simple command-line client to the Anchore Engine service

grant

Search an SBOM for licenses and the packages they belong to

kubernetes-admission-controller

Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore

stereoscope

go library for processing container images and simulating a squash filesystem

k8s-inventory

KAI (Kubernetes Automated Inventory) can poll Kubernetes Cluster API(s) to tell Anchore which Images are currently in-use

anchore-charts

Helm charts for Anchore tools and services

ci-tools

Contains scripts for running anchore engine in CI pipelines

chronicle

a fast changelog generator sourced from PRs and Issues

harbor-scanner-adapter

Harbor Scanner Adapter for Anchore Engine and Enterprise

vunnel

Tool for collecting vulnerability data from various sources (used to build the grype database)

grype-db

anchore-grafeas-cli

Tool for connecting to an anchore-engine DB and generating grafeas note/occurrence JSON documents

sbom-examples

Repository of SBOMs generated by the syft SBOM generator tool, against a list of popular dockerhub container images.

yardstick

Compare vulnerability scanners results (to make them better!)

vulnerability-match-labels

Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners

engine-operator

Helm based anchore engine operator

test-infra

Contains infrastructure for running functional tests using Helm chart deployments

azure-devops-task

Anchore Task Extension for Azure DevOps Pipelines

client-go

Golang client for Anchore API

fangs

go-struct-converter

Go library that provides a set of conversion utilities to help migrate between different versioned Go structs.

ecs-inventory

go-macholibre

homebrew-syft

homebrew tap for syft

enterprise-client-go

Go client for enterprise API

circleci-orb-grype

Repository for the Grype based CircleCI orb

test-images

Container automation for testing and validation

go-logger

engine-db-preload

Some scripting to handling creation of preloaded anchore DB container

deployment-templates

Repository for example Anchore Engine deployment methods and integrations

homebrew-grype

homebrew tap for grype

modular-policy

CLI utility for managing Anchore policy bundles as individual components. Useful for git-based policy management.